App registrations is still showing unverified but I have verified a domain

Jon Kelley 1

I have created an App Registration in the Azure portal. I have also verified my domain but when a user hits the "Sign in with Microsoft" they are still seeing "unverified".

How are you supposed to get verified?

Is there anything that requires the domain to be the root domain that is verified? For example I have verified my domain using "staging.example.com" rather than "example.com".

I saw some documentation about requiring a Microsoft Partner account number or something but I don't see that in the App Registration > Branding page as shown in the documentation.

Thanks in advance.

JamesTran-MSFT 36,366 Reputation points Microsoft Employee

2021-06-24T18:49:17.957+00:00

@Jon Kelley
Thank you for your post!

When looking at my AzureAD app registration, I was able to see something similar, did you follow our How to: Configure an application's publisher domain documentation for this? If my screenshot if completely off, can you share a screenshot of what you're seeing so I can gain a better understanding of your issue?

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.
Jon Kelley 1 Reputation point

2021-06-24T18:58:45.297+00:00

Hey @JamesTran-MSFT ,

Here is a screenshot of my screen. I don't have the warning icon next to my domain. In the dialog to verify my domain it said it was successful.

For reference this is what the users see when they hit the "Sign In With Microsoft"

Thanks,
Jon
JamesTran-MSFT 36,366 Reputation points Microsoft Employee

2021-06-28T21:38:23.507+00:00

@Jon Kelley
Thank you for the quick response and for your time and patience!

I've reached out to my team regarding this and will update as soon as possible.
Graeme Gorman 1 Reputation point

2021-06-29T15:43:42.833+00:00

We are experiencing the same issue, our app has a publisher domain set but it is still unverified. We also have nowhere to put the MPN ID on the branding. Also we have no place to upload a logo either.
JamesTran-MSFT 36,366 Reputation points Microsoft Employee

2021-06-29T16:59:30.003+00:00

@Graeme Gorman
Thank you for your comment!

When it comes adding the MPN ID, from the Mark your app as publisher verified documentation, this can only be done within an AzureAD tenant. However, based off your screenshot it looks like you're in a B2C tenant, which wouldn't be supported for publisher verification.

When it comes to adding a Logo, this will either be done through UX customization within the B2C User Flow, or within an Azure AD App registration.
·
Jon Kelley 1 Reputation point

2021-06-29T17:07:54.067+00:00

Hi @JamesTran-MSFT ,

Why is it possible to verify a domain then within the B2C tenant if it serves no purpose?

If we were to setup in an organizational tenant can we then allow authentication from outside our tenant? We need to be able to support logins from any Azure AD tenant but not necessarily any MS account?

Thanks,
Jon

1 answer

Harish S - MSFT Identity 6 Reputation points Microsoft Employee

2021-06-29T14:30:46.68+00:00

@Jon Kelley Can you confirm an MPN ID is associated with the application by sharing the screenshot of the portion below the Publisher domain? It is not enough if we verify the domain alone. You will need to link the MPN ID with the application as described in the example below where I have set a publisher domain but have not set the MPNM ID and hence the process is not complete.

Refer the steps in the article for steps on this process - https://learn.microsoft.com/en-us/azure/active-directory/develop/mark-app-as-publisher-verified
Please sign in to rate this answer.

1 person found this answer helpful.
Jon Kelley 1 Reputation point

2021-06-29T14:39:28.213+00:00

Hi @Harish S - MSFT Identity ,

I do not have that section in my screen within the App registration. How do I get that section to show?

Thanks,
Jon

JamesTran-MSFT 36,366 Reputation points Microsoft Employee

2021-06-29T16:46:41.033+00:00

@Jon Kelley
Thank you for the quick follow up on this!

Based off the publisher verified documentation, can you confirm that you're signed into an account that is authorized (Application Admin, Cloud Application Admin, Global Admin) to make changes to the app(s) you want to mark as Publisher Verified?

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

Jon Kelley 1 Reputation point

2021-06-29T16:50:42.247+00:00

Hi @JamesTran-MSFT ,

I tried that screen but have the same result. Here is a screenshot.

Thanks,
Jon

Jon Kelley 1 Reputation point

2021-06-29T16:56:00.383+00:00

HI @JamesTran-MSFT ,

I created this app registration myself and I am not part of an organization in AD if that complicates things or not. I signed up with Azure using my email account and created this App registration.

Let me know where to look to see these roles/permissions as I couldn't find anything under my profile or settings specifying what I am for this system.

Thanks,
jon
Sign in to comment